$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: Zj0Eqfx/bdDP6A3yiSBHaQq0UStNRrFsuon76k8Z0Ho= Subject key identifier: B3:C3:52:6B:6F:AA:EF:81:16:33:D5:98:22:25:92:AE:F1:78:EB:E0 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 043E Signing time: Thu 15 May 2025 00:19:08 +0000 Manifest this update: Thu 15 May 2025 00:19:08 +0000 Manifest next update: Thu 22 May 2025 00:19:08 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: HzmKpqhPf3ZvYOLdCTdxfRkG2RbD28zw6Oa5qLKDQSs=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: May 15 00:19:08 2025 GMT Not After : May 22 00:19:08 2025 GMT Subject: CN=682532fc-6995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:0a:73:8d:8e:6d:3a:b7:9b:8e:1f:c5:9e: b5:91:b7:8d:dd:af:2f:01:e8:45:cc:95:18:14:ba: 97:7b:e5:57:13:df:b6:b6:a8:ff:bb:bf:ed:3f:cd: b7:7d:5c:45:cc:17:89:c6:27:d2:56:16:a7:bd:8e: ab:bf:bb:04:2d:91:9a:71:94:bf:e2:c1:d9:44:84: fc:f7:c5:f5:d1:2c:77:6c:44:a5:06:7a:97:01:fc: 3e:bb:18:1c:3a:0a:97:0c:64:77:1f:8e:6e:b3:cc: 18:fc:3c:be:67:2f:b0:59:f1:63:56:eb:09:14:78: 93:e0:44:75:4a:73:0f:39:07:ac:66:c3:de:96:74: ef:19:fe:76:cb:4f:ce:d9:73:3c:3e:bf:8f:f0:e7: 4d:f0:91:c9:29:30:d4:0b:65:41:e0:f4:3f:6d:e4: 4a:50:34:56:ff:41:bf:79:b3:6f:30:62:ca:4b:27: fe:25:49:fb:34:8d:fa:e7:45:af:f8:41:bf:7f:ad: f8:59:39:60:e6:34:db:28:13:ba:83:5a:c4:91:4b: c7:19:6b:8c:ae:7b:1f:09:07:c9:31:66:4b:9a:26: 25:67:e5:d6:88:54:42:03:e0:e9:3d:4c:b7:96:17: bf:a6:84:87:12:5c:85:63:33:ee:88:09:fc:86:70: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C3:52:6B:6F:AA:EF:81:16:33:D5:98:22:25:92:AE:F1:78:EB:E0 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:81:77:3b:c9:14:b4:c8:7b:16:24:97:3a:a8:5a:33:37:7e: 2e:3d:96:2b:45:e3:19:80:86:51:fb:37:ca:23:43:cf:32:08: a6:8c:74:de:26:d1:5e:f7:fa:3d:0a:20:dd:44:9a:27:5e:6c: 70:fe:66:95:f3:bf:7d:68:13:04:49:2e:e8:97:75:ff:8f:88: 6c:e2:da:83:d5:1b:7c:66:dc:7a:a3:21:40:7d:ca:ad:64:02: 92:39:b5:ba:6d:55:f0:91:0e:1c:fc:c8:b2:f7:d8:2a:d5:8b: dd:b4:92:b0:f1:aa:3d:9c:6d:94:13:64:7e:2a:cf:1d:7d:92: 96:d2:9c:d0:5b:34:ff:82:2b:c8:9d:9b:5b:e9:83:69:c7:b7: 6b:5a:9c:24:89:a0:1e:d5:37:a4:92:02:6e:97:e0:62:c4:94: 78:0b:7a:0d:04:40:8c:cb:e2:9a:32:a1:14:2c:50:da:fe:c2: e5:4f:c0:df:99:f7:bc:ad:2d:06:0a:db:41:b3:1b:3a:41:1d: 40:62:47:11:07:e2:3c:10:8b:2e:ed:3d:13:39:bc:e4:ce:37: 3e:18:4f:ad:55:9a:72:d6:48:85:0c:ae:1d:41:27:01:76:14: 93:b1:5d:e3:c4:b2:8c:9d:62:54:d4:4b:9d:9f:db:79:94:20: c8:ba:a4:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwNTE1MDAxOTA4WhcNMjUwNTIyMDAxOTA4WjAYMRYwFAYD VQQDEw02ODI1MzJmYy02OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdYKc42ObTq3m44fxZ61kbeN3a8vAehFzJUYFLqXe+VXE9+2tqj/u7/tP823 fVxFzBeJxifSVhanvY6rv7sELZGacZS/4sHZRIT898X10Sx3bESlBnqXAfw+uxgc OgqXDGR3H45us8wY/Dy+Zy+wWfFjVusJFHiT4ER1SnMPOQesZsPelnTvGf52y0/O 2XM8Pr+P8OdN8JHJKTDUC2VB4PQ/beRKUDRW/0G/ebNvMGLKSyf+JUn7NI3650Wv +EG/f634WTlg5jTbKBO6g1rEkUvHGWuMrnsfCQfJMWZLmiYlZ+XWiFRCA+DpPUy3 lhe/poSHElyFYzPuiAn8hnBJcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPDUmtv qu+BFjPVmCIlkq7xeOvgMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8gXc7yRS0yHsWJJc6qFozN34uPZYrReMZgIZR+zfKI0PPMgimjHTe JtFe9/o9CiDdRJonXmxw/maV8799aBMESS7ol3X/j4hs4tqD1Rt8Ztx6oyFAfcqt ZAKSObW6bVXwkQ4c/Miy99gq1YvdtJKw8ao9nG2UE2R+Ks8dfZKW0pzQWzT/givI nZtb6YNpx7drWpwkiaAe1TekkgJul+BixJR4C3oNBECMy+KaMqEULFDa/sLlT8Df mfe8rS0GCttBsxs6QR1AYkcRB+I8EIsu7T0TObzkzjc+GE+tVZpy1kiFDK4dQScB dhSTsV3jxLKMnWJU1Eudn9t5lCDIuqQS -----END CERTIFICATE-----Generated at Thu May 15 16:40:43 2025 by rpki-client